IRC and stunnel

fflarex · 2010-03-05 01:23:11

I'm trying to connect to IRC with SSL using stunnel and I'm not having much luck. Documentation is sparse and very vague; more like a reference for people who already know how to use it. So I've resorted to making educated guesses, but nothing has worked. I'm using ii as my IRC client if that makes a difference (although I think the point of stunnel is precisely that it shouldn't make a difference).

I've tried many different configs, but here is the simplest one I keep coming back to that I really think should work according to my current understanding:

client = yes

[freenode]
accept = 6667
connect = irc.freenode.net:7070

And of course, I'm then connecting to localhost:6667 with my IRC client but it just gives an error and exits. Can someone help me out?

Last edited by fflarex (2010-03-05 01:31:27)

Sin.citadel · 2010-03-05 13:48:26

can u post the error as well as relevant info from /var/log/everything.log

fflarex · 2010-03-05 17:20:52

The error I get from ii is really vague with almost no information. Something like "[error]: connection closed/refused by remote host" or something like that. I'll look through my logs when I get home later this afternoon.

Daenyth · 2010-03-05 19:53:34

The remote host wasn't listening on the port you wanted, it sounds like.

Probably because freenode doesn't support ssl.

Last edited by Daenyth (2010-03-05 19:54:05)

fflarex · 2010-03-05 21:31:25

This seems to indicate that freenode does support SSL. I tried it in pidgin (but with its built-in SSL support) and managed to connect. Here's some log info:

Mar  2 23:14:11 hostname stunnel: LOG5[3716:140354404091648]: Reading configuration from file stunnel.conf
Mar  2 23:14:11 hostname stunnel: LOG5[3716:140354404091648]: Configuration successful
Mar  2 23:14:11 hostname stunnel: LOG5[3716:140354404091648]: No limit detected for the number of clients
Mar  2 23:14:11 hostname stunnel: LOG5[3722:140354404091648]: stunnel 4.31 on x86_64-unknown-linux-gnu with OpenSSL 0.9.8l 5 Nov 2009
Mar  2 23:14:11 hostname stunnel: LOG5[3722:140354404091648]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
Mar  2 23:25:14 hostname stunnel: LOG4[3722:140354404083472]: Service irc REFUSED by libwrap from 127.0.0.1:43222
Mar  2 23:25:14 hostname stunnel: LOG5[3722:140354404083472]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Mar  2 23:25:44 hostname stunnel: LOG4[3722:140354404083472]: Service irc REFUSED by libwrap from 127.0.0.1:43239
Mar  2 23:25:44 hostname stunnel: LOG5[3722:140354404083472]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Mar  2 23:25:59 hostname stunnel: LOG4[3722:140354404083472]: Service irc REFUSED by libwrap from 127.0.0.1:43247
Mar  2 23:25:59 hostname stunnel: LOG5[3722:140354404083472]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
Mar  2 23:30:18 hostname stunnel: LOG5[3722:140354404091648]: Received signal 15; terminating

Last edited by fflarex (2010-03-05 21:43:03)

Daenyth · 2010-03-06 00:48:54

Wow, I must be really confused. I could have sworn they didn't... It must be something else that I got confused with.
EDIT: Ah, they only started supporting SSL on Jan 30th this year

Did you put an exception in hosts.allow?

Last edited by Daenyth (2010-03-06 00:51:04)

fflarex · 2010-03-06 02:03:10

I'm not sure what you mean. What do I need to put in that file?

Sin.citadel · 2010-03-07 04:33:55

stunnel: 127.0.0.1

try adding this to /etc/hosts.allow

Arch Linux

#1 2010-03-05 01:23:11

IRC and stunnel

#2 2010-03-05 13:48:26

Re: IRC and stunnel

#3 2010-03-05 17:20:52

Re: IRC and stunnel

#4 2010-03-05 19:53:34

Re: IRC and stunnel

#5 2010-03-05 21:31:25

Re: IRC and stunnel

#6 2010-03-06 00:48:54

Re: IRC and stunnel

#7 2010-03-06 02:03:10

Re: IRC and stunnel

#8 2010-03-07 04:33:55

Re: IRC and stunnel

Board footer